VerliAdmin <= 0.3 (language.php) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================= VerliAdmin = 0.3 language.php Local File Inclusion Exploit ============================================================= !/usr/bin/perl VerliAdmin = 0.3 Remote Command Execution...

CVE-2006-6382

The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which allows local users to append log data to arbitrary files via a symlink attack. NOTE: The provenance of this information is unknown; the details are obtained...

CVE-2006-6382

The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which allows local users to append log data to arbitrary files via a symlink attack. NOTE: The provenance of this information is unknown; the details are obtained...

CVE-2006-6301

DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain...

CVE-2006-6301

DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain...

CVE-2006-4396

The CVE-2006-4396 issue affects Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier. The ATS server fails to securely create log files, which can allow a local attacker to overwrite or create files with system privileges via unspecified vectors (possibly related to a symlink attack). ...

CVE-2006-4396

The Apple Type Services ATS server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create and modify arbitrary files via unspecified vectors, possibly relating to a symlink attack...

2BGal 3.0 (admin/configuration.inc.php) Local Inclusion Exploit

No description provided by source. !/usr/bin/perl 2BGal 3.0 Remote Command Execution Exploit linK : http://www.ben3w.com/multimedia/devphp2bgal.php cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or kw3rlnATrst-crew.net d0rk: "2BGa...

2BGal 3.0 - '/admin/configuration.inc.php' Local File Inclusion

!/usr/bin/perl 2BGal 3.0 Remote Command Execution Exploit linK : http://www.ben3w.com/multimedia/devphp2bgal.php cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or kw3rlnATrst-crew.net d0rk: "2BGal 3.0 - Powered by Ben3w" File...

Alstrasoft e-Friends 4.85 - Remote Command Execution

!/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command Execution Exploit Site : http://www.alstrasoft.com/efriends.htm Coded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: [email protected] or [email protected] PS: fuck CarcaBot ..another lame romanian guy= use...

Tons of SQL-injections and XSS in Eichhorn Portal and vendor page

Hi list. There are lots of SQL injections and XSS in the 'Eichhorn Portal' by 'Guder und Koch Netzwerktechnik' and their own website. Input passed to multiple parameters in different PHP-files isn't properly sanitised before being returned to the user. This can be exploited to execute arbitrary...

Multiple Novell eDirectory security vulnerabilities

Remote Denial of Service, cleartext password in log files...

VMWare ESX Server crossite scripting and password leak

Management Interface crossite scripting. Additionally, cleartext password is contained in session cookie and server log files...

CVE-2005-3620

The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are stored in world-readable web server log files, which allows local users to gain privileges...

vbPortal 3.0.2 <= 3.6.0 b1 (cookie) Remote Code Excution Exploit

Exploit for unknown platform in category web applications ================================================================ vbPortal 3.0.2 this works with magicquotesgpc=Off\r\n"; echo "dork: Portal By vbPortal Version 3.5.0 = 3.6.0 Beta 1 \r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd...

CVE-2006-3834

EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry passwords via log files, referrers, or other vectors...

CVE-2005-3619

Cross-site scripting XSS vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1 upgrade patch 6 allows remote attackers to inject arbitrary web script or HTML via messages that are not sanitized when...

CVE-2005-3619

CVE-2005-3619 affects VMware ESX Server management interface. The issue is a cross-site scripting (XSS) vulnerability in the web-based syslog viewer, where messages displayed without proper sanitization can inject arbitrary script/HTML. Affected versions include ESX 2.5.x prior to 2.5.2 upgrade p...

CVE-2006-2558

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent useragent header in an HTTP request, which is not filtered when the log files are viewed...

Fusion News v.1.0 (fil_config) Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; Exploit coded by: X0r1 Bug found by: X0r1 release: 21.05.06 vulnerable code in sources\post.php at lines 32-35: ---------------------------------------------------------------------------------- ... global $VARS, $TEMPLATE, $fillan...